General

  • Target

    c95f93758ad473_JC.exe

  • Size

    73KB

  • MD5

    c95f93758ad4737b545f2a9dae7a9a92

  • SHA1

    549d923b72576097a870692de4fcb871838196fb

  • SHA256

    6a2ad9e2838b90dd9965756a86f96c9d153fc58269812e78108c2fb101a762f1

  • SHA512

    5c86b874e4fd3808738c789e2f4e3b337c6408ee0c20a46b06d83584d459490ff6225b6aeaf20f55e7290fbb7d5249405341e9fed7db45ed8e534f999d9acea1

  • SSDEEP

    1536:RgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:RMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c95f93758ad473_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections